N00039-18-R-0009 - RFP QA Set 5 - 13 Apr 18 - Final.pdf

CANES Training Virtual Environment - N00039-18-R-0009

Question #

QUESTION GOVERNMENT RESPONSE WILL RESULT IN A

RFP CHANGE?

Amendment #4 Solicitation, Section B 1(d)1 -- “DETERMINATION OF INCENTIVE BONUS FOR SCHEDULE

PERFORMANCE” payout bonus for CLIN 0001 as follows: 210 days/300 days/330 days after Award. These changes are also reflected in the TO1 solicitation document on page 4 of 16. However, the changes are not reflected in Section M_Subfactor 1.4 (b) which shows a November 30 date for the likely incorporated of the system into the NETC electronic classroom 2018 (p 88 of 95). Will the Government please adjust the Subfactor

1.4 Objective to 210 days after the DAO?

Yes, Section L, Subsection 3.1.1, and Section M

,Subsection 1.4, has been updated to match

Amendment #4 Solicitation, Section B 1(d)1. See

Amendments 0005 and 0006.

Yes

Section M, subfactor 1.4 (a) the threshold requirement requests "…the proposed approach demonstrates the ability to deliver and test the CANES virtual environment training in the NETC classroom…" Subfactor 1.4 (b) the objective requirement requests "...the proposed CANES training virtual environment is likely to be incorporated into the NETC electronic classroom..." Will the government clarify what it means by "likely to be incorporated?"

The Government clarifies "Likely to be incorporated", in this context means that the CANES

Training virtual environment will be accessed from the NETC Electronic Classroom and this is where training will be conducted.

No

Ref. Question #183: Can the Government confirm its software and hardware/firmware licenses extend to the

Offeror for the purposes of emulating CANES network components?

Yes, the Government provided software and hardware/firmware licenses extend to the Offeror for the purposes of emulating CANES network components. Government Furnished Information that is provided to the Contractor for use under Task

Order 0001 is only to be used in performance of this contract and is subject to DFARs Clause

252.227.7025 in Section I.

No

Ref SOW 5.3.4 states, “In addition to representing the CANES system, the training environment shall simulate surrounding users and behaviors to model / represent a fully connected and active ship to include:

modeling/representing connected systems including NAVSSI, ADNS, SATCOM links, and the NOC, modeling/ representing at least one other CANES ship to emulate remote endpoints (e.g. for email transfers), modeling/ representing multiple users that are active on the system, and multiple user accounts, and simulating system failures and cybersecurity events.”

Using “ADNS” as an example, ADNS is referenced in 37 of the 436 lessons in the curriculum. Because ADNS only appears in Information Sheets or fill in the blank exercises, simulation of ADNS should not be required. Is it the

Government’s intent for Offerors to use the curriculum to define connected systems simulation requirements or is it the Government’s intent for Offerors to provide simulation of the connected systems regardless of how it is represented in the curriculum?

For current baselines (existing curriculum that was provided) environment should provide an accurate representation to train that curriculum. However, for future baselines, the environment should include the capability of modeling and representing connected system to remote endsites. This would include ADNS for the transport mechanism.

No

Is Impact Level 4 (IL-4) required?

IL-4 is only required if proposing a cloud-based solution. The Task Order 0001 SOW (Attachment

2a) states "If the Contractor is providing a cloud-based solution, the security required is Impact Level

4 (IL-4), "CUI or Non-CUI Non-Critical Mission

Information, Non-National Security Systems" with the following caveats/assumptions: VE represents

UNCLAS enclave only, VE doesn't include any hosted system's data (could drive it to be National Security

System), if VE includes HBSS, it only includes out of the box software (no USG-tailored policies or GOTS associated), and any passwords must be encrypted or not stored on the network (e.g., passwords included in installation instructions)."

Yes